Risk Assessment Services

The Vendor is required to provide risk assessment services for include:
1. Enterprise risk assessment
•    Identify and evaluate operational, financial, investment, technology, and compliance risks.
•    Prioritize identified risks and determine risk impact, risk likelihood, and risk factors.
•    Develop a formal risk register, scoring system, and mitigation roadmap.
•    Recommend processes for continuous risk monitoring and integration into strategic planning.
2. Internal audit program development
•    Assist retirement plan services in drafting an internal audit policy aligned with professional standards.
•    Define the audit universe and develop a three-year risk-based internal audit plan.
•    Define methodologies, reporting standards, and communication protocols.